CVE-2016-6254

N/A

Description

Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted network packet.

CVE Details

CVSS v3.1 ScoreN/A

Published8/19/2016

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

collectd:collectddebian:debian_linuxfedoraproject:fedora

Weaknesses (CWE)

CWE-119

References

http://collectd.org/news.shtml(cve@mitre.org)

http://www.debian.org/security/2016/dsa-3636(cve@mitre.org)

https://github.com/collectd/collectd/commit/b589096f907052b3a4da2b9ccc9b0e2e888dfc18(cve@mitre.org)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CM4W5SJ4OTBGINGIN4NJLXCUZAZANO6J/(cve@mitre.org)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIZ5UXDOB7BA5NGE2F2I2BL4K6763DHW/(cve@mitre.org)

http://collectd.org/news.shtml(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2016/dsa-3636(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/collectd/collectd/commit/b589096f907052b3a4da2b9ccc9b0e2e888dfc18(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CM4W5SJ4OTBGINGIN4NJLXCUZAZANO6J/(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIZ5UXDOB7BA5NGE2F2I2BL4K6763DHW/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.